← All advisories

High severity7.1NVD Advisory· Published Aug 19, 2026

CVE-2026-66596

CVE-2026-66596

Description

Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Newsletterllm-fuzzy
Range: <=9.3.3
Package: https://wordpress.org/plugins/newsletter

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/newsletter/vulnerability/wordpress-newsletter-plugin-9-3-3-cross-site-scripting-xss-vulnerabilitynvd

News mentions

1

WordPress Plugins: 25 Vulnerabilities Disclosed, Including Critical Unauthenticated Flaws
Vypr Intelligence · Aug 19, 2026